This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
File:                     gVvw7iCl3LowV8PTW1jsFHcuj-8.mft (raw, json)
Hash identifier:          aoGot4E12Lvs9VXWLG1ceanmxyy3iKQo39rxUwJ90UY=
Subject key identifier:   4D:26:93:60:CC:E4:63:D3:41:76:07:73:51:35:82:5B:FA:8C:22:4B
Authority key identifier: 81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF
Certificate issuer:       /CN=A91149E6/serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
Certificate serial:       032E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
Manifest number:          032A
Signing time:             Thu 04 Dec 2025 23:27:23 +0000
Manifest this update:     Thu 04 Dec 2025 23:27:23 +0000
Manifest next update:     Thu 11 Dec 2025 23:27:23 +0000
Files and hashes:         1: gVvw7iCl3LowV8PTW1jsFHcuj-8.crl (hash: QhR9WKNCuNq+b/KFKi4TNCQsEYA1Xz2lFZi8/tEoUXc=)
                          2: 54FEFAA2ED4C11EC821F3D84C4F9AE02.roa (hash: X6/WL2Fb6NLT/TbbuE2SKgksYwkJEDYC9NLRzws0bWY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl
                          rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 814 (0x32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91149E6, serialNumber=815BF0EE20A5DCBA3057C3D35B58EC14772E8FEF
        Validity
            Not Before: Dec  4 23:27:23 2025 GMT
            Not After : Dec 11 23:27:23 2025 GMT
        Subject: CN=693218db-976f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:52:aa:4f:a2:cc:4e:3d:96:1d:43:39:c8:
                    a7:e4:aa:57:ff:fd:98:5a:5c:9c:5e:c6:74:ce:d3:
                    87:76:c8:05:7e:cc:af:79:ef:8d:12:53:ba:de:a0:
                    71:66:57:66:4c:a0:e8:e9:a1:bf:a6:4b:52:03:7e:
                    02:52:b9:53:11:8a:5d:17:56:9f:7d:19:c8:5a:45:
                    f5:f9:9c:66:7f:8c:4e:cc:f2:c5:a6:2c:ae:b1:3b:
                    54:4e:30:eb:1b:af:09:27:69:c6:89:c6:82:1d:35:
                    82:2f:61:0d:c8:97:27:67:6c:3b:a4:55:5d:dc:b1:
                    c2:86:d6:40:f5:55:36:c8:35:1c:8f:b2:91:f2:b1:
                    63:52:0f:e4:7a:0f:66:87:09:f7:03:39:f5:41:6e:
                    ca:62:84:67:55:8b:ed:70:fe:bc:49:ee:0f:2f:a6:
                    8b:3e:44:1f:35:36:ed:de:bd:80:c3:90:dd:25:88:
                    d2:d6:45:b8:9a:ea:b3:8c:a0:cd:de:8c:8f:21:a2:
                    25:3e:44:df:2b:ab:0d:5f:3e:54:78:71:59:59:2e:
                    e0:48:b4:06:ed:1d:cc:31:93:c2:00:35:92:0b:77:
                    33:b3:a8:54:87:3d:12:ac:d9:1a:26:3d:1b:5f:a6:
                    98:55:72:c9:4d:88:fb:b4:42:ed:b8:25:fa:1d:28:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:26:93:60:CC:E4:63:D3:41:76:07:73:51:35:82:5B:FA:8C:22:4B
            X509v3 Authority Key Identifier:
                keyid:81:5B:F0:EE:20:A5:DC:BA:30:57:C3:D3:5B:58:EC:14:77:2E:8F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gVvw7iCl3LowV8PTW1jsFHcuj-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149E6/3246FE6EED4811ECB5DE1082C4F9AE02/gVvw7iCl3LowV8PTW1jsFHcuj-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:50:b1:b9:24:98:be:c6:4d:6d:4a:93:34:78:c0:54:1d:e8:
         22:44:7a:d7:47:fb:90:a7:a0:82:b1:74:f2:98:d1:df:d8:ac:
         56:8d:a3:b8:0d:ae:a4:27:c8:16:21:29:9f:1f:f7:97:14:78:
         e7:50:0b:ee:19:4b:0f:67:96:a3:ed:93:90:b9:ab:cf:19:42:
         c8:0a:1d:ce:21:f3:b0:92:f5:ce:49:9f:22:af:c5:d4:6f:79:
         f1:e1:a9:84:e3:0f:c4:df:1c:06:fe:69:5f:3f:72:9f:b5:4d:
         6a:88:f7:b3:ed:b4:0d:74:90:83:f1:3c:b3:e5:c2:0c:19:33:
         c0:75:04:d3:75:57:cd:3c:e1:13:f5:bb:0a:ac:2c:62:09:bf:
         9b:04:2b:90:e1:cc:5a:4b:b4:a9:ce:ae:db:b5:b9:72:62:50:
         99:4e:6a:f0:df:f4:19:2c:db:51:fb:10:42:61:c4:79:7e:dc:
         a5:27:9f:26:ad:de:d8:d2:95:90:7f:29:a0:5b:2d:64:1e:8a:
         57:ce:78:5d:4e:1e:bb:6d:da:89:47:fa:df:dd:20:24:c3:ed:
         29:38:bf:d8:d8:df:c8:ef:19:f7:53:5e:c1:65:a6:a4:4e:f8:
         ae:54:94:aa:77:db:0b:79:5d:30:aa:e4:a4:52:71:07:35:93:
         5c:af:3b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:20:46 2025 by rpki-client